reelcn-motion
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified during the analysis. The skill is professionally authored with a clear focus on motion design and quality auditing.
- [INDIRECT_PROMPT_INJECTION]: The skill features a data ingestion surface by cloning repositories and capturing live URLs for design material. It proactively mitigates risks by instructing the agent to delete potential instruction files (such as .cursorrules or CLAUDE.md) from captured folders and enforcing a rule to never send data to outside services.
- [REMOTE_CODE_EXECUTION]: Remote tool execution is restricted to well-known and reputable providers like Remotion and HeyGen, using standard npx and cargo installation patterns.
- [COMMAND_EXECUTION]: Local media auditing and track generation are handled via ffmpeg and ffprobe subprocesses. These are invoked using safe argument-array patterns rather than shell strings, preventing command injection vulnerabilities.
Audit Metadata